June 30, 2008
"The strength of Cinxi SIEM lies in its simplicity." "... the simplest to deploy because of its auto identification of devices. Cinxi was up and collecting data in literally minutes, and when we brought new systems online in our environment it was a snap to get them properly identified."
Cisco MARS Replacement Resource Center
Given Cisco's recent End-of-Life announcement for MARS, customers will need to consider how they transition to a new SIEM / log management solution. There are a few important points to consider; ensure that you employ a Cisco certified appliance that gives you full interoperability and provides an affordable, smooth transition.
Unlike most other SIEM or log management solutions that require multiple appliances to perform both log management and event correlation, Cinxi combines both technologies on one high performance appliance, available in four models with variety of 'horse-power'. Now, MARS customers can easily obtain true end-to-end security event management - from log collection and storage, to real-time monitoring and incident identification, to remediation and full documentation for regulatory compliance.
Cinxi combines complete log management capabilities with powerful correlation technologies to deliver:
- Unparalleled visibility into your security and compliance posture
- Cisco verified integration with Cisco devices
- Extensive support for non-Cisco devices and applications
- Prioritized threat identification, alerting and remediation guidance
- Comprehensive log management reporting for compliance and audit
- Strong correlation capabilities and pattern identification
- Extensive on-board log storage with fast access to your event logs
See How Cinxi Compares to MARS
|
Features |
MARS |
CINXI |
|
Appliance based |
√ |
√ |
|
Performance: Events per Second (EPS) |
3k |
15k - 116k |
|
Supports non-Cisco devices |
|
√ |
|
Full event correlation across all events |
|
√ |
|
GUI based device integration toolkit |
|
√ |
|
Full log encryption (AES 256) |
|
√ |
|
Remote raw log archiving |
|
√ |
|
Real-time threat correlation and analysis |
|
√ |
|
Audit ready compliance reports |
|
√ |
|
Interactive Interface & direct drill down into events |
|
√ |
|
Event normalization |
√ |
√ |
|
Multiple appliances can forward to a master console |
|
√ |
|
Integrates with Cisco Remote Monitoring Service |
|
√ |
|
Integrates with enterprise-class SIEM |
|
√ |
|
Behavior-based and rules-based event correlation |
√ |
√ |
|
Layer 3 and Layer 2 routers, switches and firewalls |
√ |
√ |
|
Proactive actionable anti-virus alerts |
|
√ |
|
Automated vulnerability scanner data capture |
√ |
√ |
|
Role-based security event management dashboard |
√ |
√ |
|
Monitoring of privileged users/authentication |
|
√ |
Cinxi Resources
Learn more about Cinxi and Cisco environments >
Read Cisco's 'Cinxi One SIEM Partner Guide' >
To talk with a Cisco MARS replacement specialist call Scott Saxon at 908-963-6890
or email us at MARS@netforensics.com.
* Proof of MARS purchase required. All orders shipped within 10 business days. Proof of Concept evaluations available upon request.
